General

  • Target

    ff9219cf3805f3c779117abcfa19e1a85b71a7e30bf363c7831b0dd11bc59efdN.exe

  • Size

    80KB

  • MD5

    78b72a6243e4e9985929f6dab26b7770

  • SHA1

    8f0eb2269bd0b9fe74af559279e5064b37bf647d

  • SHA256

    ff9219cf3805f3c779117abcfa19e1a85b71a7e30bf363c7831b0dd11bc59efd

  • SHA512

    47077047883fd033324ddd0be07dae8c2b8d9e5f04895e73ef7b1b80a29808f6b5f2a2a0517530b65f07f5bc47cb25eb945ff8baf77ceff07ef191237c2c92d4

  • SSDEEP

    1536:5POOhfbOjovgdVydUgoNrwBZXGDaZ1QIxrfItMgR7ZaO+fGxHZPEgAaC/1:5dbwovEVyqgoZmZXWfIdQdRaefPCfd

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ff9219cf3805f3c779117abcfa19e1a85b71a7e30bf363c7831b0dd11bc59efdN.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections